hsql + spring security